Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2024-23296
HistoryMar 05, 2024 - 8:16 p.m.

CVE-2024-23296

2024-03-0520:16:01
CWE-787
[email protected]
web.nvd.nist.gov
6
cve-2024-23296
memory corruption
ios 17.4
ipados 17.4
arbitrary kernel read
arbitrary kernel write
kernel memory protections
apple
exploited

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.

Affected configurations

NVD
Node
appleipad_osRange<17.4
OR
appleiphone_osRange<17.4
OR
applemacosRange14.0–14.4
OR
appletvosRange<17.4
OR
applevisionosRange<1.1
OR
applewatchosRange<10.4

Related

vulnrichment 1
prion 1
cisa_kev 1
cve 1
attackerkb 1
cvelist 1
malwarebytes 1
hivepro 1
thn 2
krebs 1
apple 7
openvas 2
nessus 2
vulnrichment
vulnrichment
CVE-2024-23296
2024-03-05 19:24:13
prion
prion
Memory corruption
2024-03-05 20:16:00
cisa_kev
cisa_kev
Apple Multiple Products Memory Corruption Vulnerability
2024-03-06 00:00:00
cve
cve
CVE-2024-23296
2024-03-05 20:16:01
attackerkb
attackerkb
CVE-2024-23296
2024-03-05 00:00:00
cvelist
cvelist
CVE-2024-23296
2024-03-05 19:24:13
malwarebytes
malwarebytes
Update your iPhones and iPads now: Apple patches security vulnerabilities in iOS and iPadOS
2024-03-06 12:45:11
hivepro
hivepro
Apple Rolls Out Critical Updates to Address Zero-Day Flaws
2024-03-06 17:58:01
thn
thn
Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices
2024-05-14 05:16:00
Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws
2024-03-06 05:54:00
krebs
krebs
Patch Tuesday, March 2024 Edition
2024-03-12 20:36:33
apple
apple
About the security content of visionOS 1.1
2024-03-07 00:00:00
About the security content of iOS 16.7.8 and iPadOS 16.7.8
2024-05-13 00:00:00
About the security content of macOS Ventura 13.6.7
2024-05-13 00:00:00
openvas
openvas
Apple MacOSX Security Update (HT214107)
2024-05-14 00:00:00
Apple Mac OS X Security Update (HT214084)
2024-03-22 00:00:00
nessus
nessus
macOS 13.x < 13.6.7 Multiple Vulnerabilities (HT214107)
2024-05-13 00:00:00
macOS 14.x < 14.4 Multiple Vulnerabilities (HT214084)
2024-03-07 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON
Related for NVD:CVE-2024-23296
vulnrichment1prion1cisa_kev1cve1attackerkb1cvelist1malwarebytes1hivepro1thn2krebs1apple7openvas2nessus2